Insights from the Field

Introduction VMSA-2026-0001 addresses three vulnerabilities identified as CVE-2026-22719, CVE-2026-22720, and CVE-2026-22721. The advisory applies to VMware Aria Operations, a platform commonly integrated directly into vCenter environments for monitoring, analytics, and operational visibility. Aria Operations maintains authenticated connections to vCenter, collects configuration and performance data from ESXi hosts, and often integrates with Active Directory or other external

Introduction Broadcom VMware has released VMSA-2025-0003, a security advisory detailing multiple vulnerabilities affecting VMware Aria Operations for Logs, Aria Operations, and VMware Cloud Foundation. These vulnerabilities range from information disclosure to privilege escalation and stored cross-site scripting (XSS), posing risks to system integrity, confidentiality, and overall security. For organizations leveraging VMware’s cloud and virtualization management platforms, u

Introduction Today, VMware disclosed a significant security vulnerability VMSA-2025-0002 (CVE-2025-22217) impacting its Avi Load Balancer platform. With a CVSSv3 score of 8.6 (Important), this unauthenticated blind SQL injection flaw has the potential to severely compromise critical systems, making it essential for organizations using this platform to act swiftly. Here’s what you need to know about the vulnerability, its implications, and how to protect your environment. What

Recently, VMware issued VMSA-2025-0001, addressing a Server-Side Request Forgery (SSRF) vulnerability, CVE-2025-22215, in VMware Aria Automation and Cloud Foundation. For anyone managing virtualized or hybrid environments, this raises important questions about how vulnerabilities like SSRF could be leveraged to enable broader attacks. Let’s unpack what this means and why it matters. What is SSRF and Why Should You Care? SSRF (Server-Side Request Forgery) is a vulnerability th